Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json)
Hash identifier:          O25r8g4/M/tAK0HfyvNvcmfYbxY4uTv/AvKn2xHM9oM=
Subject key identifier:   2C:35:AC:8E:EE:8F:D8:29:27:46:AE:2C:00:FB:57:00:53:0E:1E:D7
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
Manifest number:          2C
Signing time:             Sun 19 May 2024 08:28:06 +0000
Manifest this update:     Sun 19 May 2024 08:28:05 +0000
Manifest next update:     Sun 26 May 2024 08:28:05 +0000
Files and hashes:         1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: 3j7DtuFZarxWXX9qg0INXF7qbzZOaMthCDOCROMJCuM=)
                          2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: lawsYWPU6sG/zSMNJA9UvzdkRGaYJkKdFnUsUbkU8/s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: May 19 08:28:05 2024 GMT
            Not After : May 26 08:28:05 2024 GMT
        Subject: CN=6649b815-dd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:31:09:63:12:11:ef:ae:c2:26:85:e5:e8:
                    1e:72:6a:e5:cf:6a:37:29:d6:e5:6b:87:72:91:eb:
                    f3:ff:c3:14:f1:c7:ab:f9:87:0f:ec:c4:7c:e8:5a:
                    8b:e4:15:f1:17:1a:50:3b:30:68:69:b4:36:ca:bd:
                    fb:ff:56:e9:c7:2a:82:ed:f4:ac:ce:a5:9a:14:f9:
                    90:eb:b6:0f:17:b6:6c:18:44:50:e9:7a:81:7d:4e:
                    fa:44:7b:14:16:af:b0:7f:7c:ff:52:05:77:ae:76:
                    db:50:6c:c5:35:9f:7b:7c:0f:b6:4a:9f:8d:c3:76:
                    ef:9c:d7:03:82:28:56:fd:64:92:07:f5:cc:0d:72:
                    f1:de:62:75:a6:61:21:3b:bb:14:ad:1c:0c:d0:0b:
                    30:b8:47:ee:43:3a:43:e3:db:89:8c:c8:f3:50:8b:
                    81:a7:8c:65:30:b9:c5:b7:8f:31:eb:e3:cf:c7:77:
                    ad:ed:de:bb:bb:b5:6d:a2:1b:04:8e:d1:f5:b5:7e:
                    0c:02:2b:93:68:09:4c:cf:0d:8f:f1:db:5f:a2:ee:
                    7c:28:20:e3:c7:c5:e4:e1:da:6c:ed:55:08:4c:17:
                    72:8c:93:73:5a:11:b7:be:6f:ba:fa:d3:fd:59:8e:
                    45:d9:78:7c:8e:8d:10:e7:22:ac:aa:99:15:b3:59:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:AC:8E:EE:8F:D8:29:27:46:AE:2C:00:FB:57:00:53:0E:1E:D7
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:39:23:c4:d5:e2:9a:12:18:2c:55:5b:c0:a0:be:cc:24:
         67:9f:2d:36:9c:68:b0:af:4d:f9:ec:52:3a:79:99:30:15:2b:
         0d:3d:ce:a0:db:5f:44:b6:39:c7:eb:64:f7:7e:ce:82:32:fb:
         b0:6f:75:02:8a:85:d1:76:40:07:c4:6e:a2:29:11:c8:0f:be:
         ad:e9:9c:f4:61:e4:40:9e:3e:ff:3f:33:fc:2c:f3:07:7b:9e:
         32:4a:ba:e9:ef:34:08:00:e4:ed:41:b8:12:02:99:2a:78:fb:
         47:05:e5:d8:6f:17:f1:a0:82:78:b0:c0:fc:30:f1:41:c3:7d:
         3c:a1:68:e9:73:74:5f:71:d8:76:1d:cb:02:4d:74:9c:e2:8f:
         45:6d:2d:7d:63:78:9f:c0:b5:63:b3:9a:c0:66:c5:5a:e1:88:
         e0:9c:a3:34:93:0d:25:48:ec:16:01:36:23:47:b3:ca:d3:6d:
         f9:f1:e1:2f:67:33:91:0b:67:b0:5b:65:7c:39:18:aa:52:f4:
         95:c2:a3:d0:cc:e6:63:a9:36:7e:fa:14:5a:90:6f:3e:12:9a:
         7b:8e:53:c8:65:d5:ae:6b:c2:c2:d2:26:61:bc:b7:05:7c:cb:
         dd:e9:43:4c:9c:69:08:e3:ca:77:bc:a1:e1:34:99:1a:92:07:
         e4:62:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org